This article was co-authored with India Bennett.
After months of anticipation regarding the ongoing review of the Privacy Act 1988 (Cth), the Federal Government has galvanized the Australian privacy landscape with two significant developments.
Firstly, the Government has released a discussion paper
Continue Reading Flurry of activity in the Privacy Act review, including tougher penalties and new online privacy framework
On November 18, 2021, the US federal banking regulators Office of the Comptroller of the Currency, Federal Reserve Board and Federal Deposit Insurance Corporation jointly announced a final rule that will require banking organizations (which includes the U.S. operations of foreign banking
Continue Reading US banking regulators promulgate a final rule for 36-hour notice of breach
Android will adopt iOS-like privacy nutrition labels, called the “Data safety form,” starting April 2022. And according to Google, apps that fail to comply with this upcoming requirement may be “subject to policy enforcement, like blocked updates
Continue Reading Google Play Store Releases Data Safety Form
Bill 64, which purports to modernise Québec’s privacy legislation, was recently passed. This sweeping reform of the province’s framework for processing personal information hinges on three main axes:
Continue Reading Privacy legislation reform: Bill 64 has now been passed
On November 8, 2021, New York became the third state to require private employers to provide employees with notice of employer monitoring of phone, email, and internet access/usage. New York’s new law (SB 2628) goes into effect on May 7,
Continue Reading Notice of employer electronic monitoring
The Cyberspace Administration of China (CAC) released the draft Security Review Measures for Cross-Border Data Transfer (the Draft Security Review Measures) for public comments on 29 October 2021 – shortly before the effective date of the Personal Information Protection Law
Continue Reading Transfer data outside of China: New security review regulation companies should know
On 10 November 2021, the UK Supreme Court handed down the much anticipated judgment in Lloyd v Google LLC [2021] UKSC 50, unanimously allowing Google’s appeal and reversing the decision of the Court of Appeal.
In summary, the Supreme Court
Continue Reading Good news for data controllers: Lloyd v Google Supreme Court decision
The Singapore High Court and the Hong Kong District Court have both considered the right to compensation for injury to feelings in two recent cases involving misuse of personal data but arrived at different conclusions.
On October 19, 2021, a federal trial court in South Carolina ruled that a group of consumers could proceed with common law negligence and gross negligence claims directly against their organizations’ vendor that had been the victim of a security
Continue Reading Customers Can Pursue Negligence Claims Directly Against Vendor
A transparency-focused privacy software company confirms that some apps are continuing to transmit data despite some users having opted-out of “tracking.”
The study tested 10 popular apps and discovered that some continue to track even though those users have “ask[ed]
Continue Reading NT Analyzer: Does your app track users that opted-out of tracking?
